CVE-2025-27377

Altium Designer version 24.9.0 does not validate self-signed server certificates for cloud connections. An attacker capable of performing a man-in-the-middle MITM attack could exploit this issue to intercept or manipulate network traffic, potentially exposing authentication credentials or sensiti...

CVE-2025-27377

Altium Designer version 24.9.0 does not validate self-signed server certificates for cloud connections. An attacker capable of performing a man-in-the-middle MITM attack could exploit this issue to intercept or manipulate network traffic, potentially exposing authentication credentials or sensiti...

PT-2026-3884

Name of the Vulnerable Software and Affected Versions Altium Designer version 24.9.0 Description Altium Designer does not validate self-signed server certificates for cloud connections. This could allow an attacker performing a man-in-the-middle MITM attack to intercept or manipulate network...

TRUFusion Entreprise Sensitive Data Exposure

TRUFusion Entreprise is a solution to easily and securely manage the exchange of CAD files and related product design data from within your PLM system. Due to a lack of control, it is possible for an unauthenticated attacker to access an endpoint that returns all partners who have access to the...

VariCAD EN security vulnerabilities

VariCAD EN is a mechanical engineering design software from the Czech company VariCAD. A security vulnerability exists in VariCAD EN 2010-2.05 and earlier versions, which originates from parsing a .dwb file without validating the input length, and could lead to a stack buffer overflow and executi...

charmcraft (>=1.4.0, <=2.2.0), optikka-design-data-layer (0.1.58) +4 more potentially affected by CVE-2024-26130 via cryptography (3.4.0)

cryptography PYPI version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - charmcraft =1.4.0, =4.2.3, =0.1.0, =1.7.0, =0.0.1, =0.0.4 Source cves: CVE-2024-26130 Source advisory: OSV:PYSEC-2024-225...

charmcraft (>=1.4.0, <=2.2.0), optikka-design-data-layer (0.1.58) +4 more potentially affected by CVE-2024-0727 via cryptography (3.4.0)

cryptography PYPI version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - charmcraft =1.4.0, =4.2.3, =0.1.0, =1.7.0, =0.0.1, =0.0.4 Source cves: CVE-2024-0727 Source advisory: OSV:GHSA-9V9H-CGJ8-H64P...

PT-2022-18950 · Bentley · Microstation Connect

Name of the Vulnerable Software and Affected Versions: Bentley MicroStation CONNECT version 10.16.02.034 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...